a348740c62f491df9c89bbfb9061056b6063ccf29c2884069a82993b9bdc7202 | Triage

Analysis

max time kernel
121s
max time network
134s
platform
windows7_x64
resource
win7-en-20211208
submitted
09-03-2022 23:15

Sharing

Report Analysis Logs

General

Target

TRI-TECH FORENSICS, INC._620341.pdf
Size

148KB
MD5

3993a7d885717209abd2a6ac4404b9d2
SHA1

c51842dd633bcc95f94b607abd991d4c96360112
SHA256

a348740c62f491df9c89bbfb9061056b6063ccf29c2884069a82993b9bdc7202
SHA512

80797605e8242e9dc6ecbbdd5b626b23193d5e967891851d703250c8e14f497521c10efd9dfefd574413b850ac5102751083aa7cc754866f4eda3cc965a662a5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

736 AcroRd32.exe
736 AcroRd32.exe
736 AcroRd32.exe
736 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\TRI-TECH FORENSICS, INC._620341.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:736

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/736-55-0x0000000075B11000-0x0000000075B13000-memory.dmp

Filesize
8KB

Download